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Amendment 

Amendments to the Claims : Please replace all prior versions and listings of claims with the 
following listing of claims. 

Listing of Claims: 

1. (Currently Amended) A method for reactive and deliberative managing a network 
serv i c e associ a t e d with a service level management domain to — prov i d e service level 
management, wherein the network serv i ce supports one or more bus i ness processos-undcr 
service l evel management, the method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends on performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents whether the performance of the service meets or exceeds a service level 
identified in a service level agreement; 

extracting one or more component parameter values from the monitoring - oporat i ona l 
char a ct e r i st i cs of a plurality of d e vic e s coup le d to a network components that us i ng a p l ura l ity 
of s e nsors, wh e r e in th e plura l ity of d e vic e s support the network service assoc i ated with the 
serv i ce leve l management domain, wherein the using a plurality of sensors respectively 
coupled to the plurality of network components that support the service; 

monitoring the component parameter values extracted from the plurality of network 
components that support the service using a plurality of monitoring agents, wherein each of 
the plurality of monitoring agents are configured to monitor a subset of the extracted 
component parameter values in a respective domain of a plurality of domains of the network, 
detect one or more intra-domain events in response to a change i n the respective domain as a 
function operat i ona l -character i stics of the component parameter values monitored in the 
respective domain, and generate one or more intra-domain alarms in the respective domain as 
a function of the p l ura l ity of devices; intra-domain mapping th e events detected in into on e or 
more alarms using a - ft l- ura li tyof-monitor i ng agents, wherein the p l ura li ty of mon i tor i ng agents 
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ar e configur e d --to - receive tho events from tho p l ura l ity of sensors and p e rform e v e nt 
corr ela tion to m a p tho ovonts into the a l arms respective domain; 

correlating ana l yzing the intra-domain alarms generated in each of the plurality of 
domains of the network to produce ono or more corre l ated alarms using an alarm correlation 
agent, wherein the alarm correlation agent is configured to receive correlate the intra-domain 
alarms to generate one or more inter-domain from tho p l ural i ty of mon i tor i ng a g e nts and 
pcrform - o l arm corre l ation on the rece i ved alarms to produce across the corre l ated a l arms 
plurality of domains of the network ; and 

analyzing causes of the corre l ated intra-domain alarms and the inter-domain alarms 
across the network using an enterprise management system, wherein the intra-domain alarms 
and the corr ela t e d inter-domain alarms are i ndicative indicate one or more of a degradation or 
a potential degradation in [[a]] the performance of the service relative to l eve l associated w i th 
tho network s e rv i c e or a pot e nt ial d e gr a d a tion-in the service level a ssoci a t e d ' with identified in 
the n e two rk service level agreement . 

2. (Cancelled) 

3. (Currently Amended) The method of claim 1, further comprising: 

mapping determ i n i ng a state of the inter-domain alarms generated across busin e ss 
processes und e r s e rvic e le v el m a n a gement based on tho monitored operat i ona l character i st i cs 
©I the plurality of domains of dev i ces, wherein the network to serv i ce l eve l i s det e rmin e d as a 
service parameter that represents the state function of the monitored — operationa l 
character i st i cs service, a«4 wherein the service parameter has a value that indicates whether 
the performance of the service meets or exceeds the service level affects tho state of identified 
in the bus i n e ss proc e ss ' und e r service level management agreement ; and 

displaying information relating to the n e twork s e rvic e assoc i at e d - w i th the service leve l 
manag e ment domain , wherein the displayed information re l ates to includes at least one of 
availability, faults, configuration, integrity, security, reliability, performance, or the service level 
associated with the network service. 
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4. (Cancelled) 

5. (Currently Amended) The method of claim [[4]] 1, wherein analyzing the causes of the 
intra-domain alarms and v al u e -fe r the inter-domain alarms includes executing one or more 
data mining algorithms that discover respective relationships between the service - parameter is 
determ i ned using a component to s e rv i c e- p a r a m e t e r mapp i ng - funct i on parameter values and 
each of the intra-domain alarms and the inter-domain alarms . 

6. (Currently Amended) The method of claim [[5]] 3, further comprising[[:]] 
c omparing -the va l ue for the service parameter w i th a predetermined service l eve l 

i dent i f i ed in a servic e le v e l man a g e m e nt agreement; and 

determining that the state of the service satisfies the service level management 
agreement i s sat i sf ie d i f in response to the value for the service parameter meets meeting or 
exceeding exceeds the predeterm i ned service level identified in the service level m a n a g e m e nt 
agreement. 

7-22. (Cancelled) 

23. (Currently Amended) A method for reactive and deliberative mon i toring - o - busincss 
process under service level management, wherein at least one service associated with a s e rvic e 
leve l management doma i n supports the busin e ss proc e ss, th e s e rvic e hav i ng a state - expressed 
as a rang e of num e ric va l ues representing a grade of - the - serv i coy the method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends on performances of the 
plurality of network components that support the service, and wherein the service has a state 
expressed as a range of numeric values that represent whether the performance of the service 
meets or exceeds a service level identified in a service level agreement; 

extracting c o ll ect i ng operationa l data for one or more component parameter values 
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from resourc e s coup le d to a -n e twork, wh e r e in the on e- Q E- mof e- r -e sQ - urc e s plurality of network 
components that support the a t — [ea s - t - on e service using a plurality of sensors respectively 
coupled to associated with the plurality of network components that support service - leve l 
management domain, th e on e or mor e r e sourc e s perform i ng one or mor e functions on th e 
network to- prov i de the service support i ng the business process , under service l eve l 
manag e m e nt ; 

monitoring one or more the component parameters parameter values extracted from 
the op e rationa l dat a - co l lected for plurality of network components that support the on e- or - 
more resources service using a plurality of monitoring agents, wherein the plurality of 
monitoring agents are configured to detect one or more events as a function component 
parameters repr e s e nt op e rat i on a l charact e r i stics of the monitored component parameter 
values and generate f e s ourcos - supporting the at l east one serv i ce provided or more intra- 
domain alarms as a function of the detected events; 

correlating the intra-domain alarms generated by the plurality of monitoring agents 
using an alarm correlation agent, wherein the alarm correlation agent is configured to 
correlate the intra-domain alarms to generate one or more inter-domain alarms across a 
plurality of domains of the network; 

determining th e stat e of th e s e rv i e e- from - t - h e- on e- or more component parameters, 
whe - r - e i n - dotorw i n i ng- the - state of the serv i ce includes mapping va l ues of the inter-domain 
alarms generated across the plurality of domains of the network one or mefe -s &mponcnt 
parameters to a numeric va l ue in the range of numeric va l ues used to express service 
parameter that represents the state of the service, wherein the service parameter has a 
numeric value in the range of numeric values that indicates whether provides a performance 
i ndex represent i ng the grade performance of the service meets or exceeds associated w i th the 
service level management domain identified in the service level agreement ; and 

monitoring the numeric value that e xpr e ss e s the stat e of the service parameter using 
an enterprise management system to provide service level management for the busin e ss 
process service provided over the network . 
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24. (Currently Amended) The method of claim 23, furth e r compr i s i ng wherein providing 
service level management for the service provided over the network includes determining [[a]] 
that the state of the service satisfies the busin e ss - process under service level m a nag e m e nt 
■ from - agreement in response to the numeric value that expresses the state of the service 
parameter meeting or exceeding the service level identified in the service level agreement . 

25. (Currently Amended) The method of claim 23, wherein providing furth e r - Gompr i s i ng T 
d e t e rm i n i ng an acceptab l e service level management for the service , where i n provided 

over the network includes determining that acceptab l e serv i c e l e v el is identif i ed in a serv i ce 
l eve l agreement associated w i th the business process; and 

comp a r - mg the numer i c-va l ue that expresses the state of the service satisfies [[to]] the 
acceptabl e service level agreement i d e- nt -i fi e d in response to the numeric value of the service 
parameter meeting or exceeding the service level agreement to det e rmine wh e th e r identified 
in the service level agreement a ssoci a t e d with the bus i ness process is - sa - t i sficd . 

26. (Cancelled) 

27. (Currently Amended) The [[A]] method for prov i d i ng an e ntity -w i th -s e r-v i c e - le v el 
manag e m e nt of a bus i n e ss process claim 23, the method further com prising the steps of : 

determ i ning at l east ono-serv i co that supports the business process, th e at l e ast on e 
service assoc i ated w i th a service leve l manag e m e nt dom a in a nd having a -s tate - expressed as a 
rang e of num e r i c v al u e s r e pr -e sont i ng o grade of the serv i ce; 

co ll ect i ng operat i ona l data for on e- o -^- mero resources coup l ed to a network, - who rein 
the one or more resources support the at l east one service associat e d with-tho serv i ce l eve l 
management-doma i n;,- the one or more resourc e s p e rforming one or more funct i ons on tho 
network to prov i de the service support i ng the bus i ness process und e r s e rv i c e -le v el 
management for tho ent i ty; 

monitoring one or-more component parameters from the op e r a t i on al - d a ta co ll ected for 
tho on e or mor e r e sources, whorein - the - ono or more component parameters represent 
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op e rat i on al characteristics of - tho resourc e s support i ng th e-a t le ast on e service prov i ded; 

determining that the stato of tho service from tho one or mor e- compon e nt param e ters, 
wherein determ i ning tho stato of the serv i ce i nc l udes mapping va l ues of the one or moro 
component parameters to a numeric value in - t - he -p a ft go of num e ric - v al u e s used to e xpress the 
state of the service, wherein the num e r i c va l ue in the range of numer i c values provides-o 
performance index representing tho grade of the service parameter as soc i at e d w i th th e serv i ce 
l eve l management domain, wherein tho numer i c value indicates one or more of an accoptab l o 
st a t e of- th e s e rv i c e a degradation, an unacc e pt a bl e state of tho service a potential 
degradation, or an imminent change from degradation in the performance of a cc e pt a b le' st a t e 
te- the service relative to unacceptab l e stato of the service level identified in the service level 
agreement ; and 

issuing one or more instructions that tak i ng an act i on to effect a change to one or more 
of the monitored component p a r a m e t e rs parameter values in response to determining that 
the numeric value of the service parameter indicates any of i nd i cat i ng either the un a cc e pt a b le 
state of the ser - v i ee degradation, the potential degradation, or the imminent change to 
degradation in the un a cc e ptab le stat e performance of the service relative to the service level 
identified in the service level agreement, wherein the action includ e s -i ssu j ng one or more 
instructions autonomously cause the numeric value of the service parameter to meet contro l 
e-ne or mor e of exceed the service level identified in resources coup l ed to the network service 
level agreement , 

28. (Currently Amended) The method of claim [[6]] 3, further comprising determining that 
the state of the service does not satisfy the service level managem e nt agreement is not 
sat i sfied i f in response to the value for the service parameter -does not meet meeting or 
exceeding exceed than the predetermined service level identified in the service level 
m a nag e m e nt agreement. 
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29. (Currently Amended) The method of claim 1, wherein each of the plurality of s e nsor - s 
monitoring agents are further configured to detect the one or more intra-domain events based 
on one or more policies and rules associated with the network service. 

30. (Currently Amended) The method of claim 29, wherein each of the plurality of 
monitoring agents are further configured to p e rform generate the event corre l at i on one or 
more intra-domain alarms based on the one or more policies and rules associated with the 
network service. 

31. (Currently Amended) The method of claim 30, wherein the alarm correlation agent is 
further configured to perform generate the a l arm corre l ation one or more inter-domain alarms 
based on the one or more policies and rules associated with the ttff fc wQf -k- service. 

32. (Currently Amended) The method of claim [[1]] 5, wherein analyzing the enterprise 
management syst e m is configur e d to - i d e nt i fy- a- root cause of the one or more events to 
ana l yze the causes of the correlated intra-domain alarms and across the network inter-domain 
alarms further includes: 

executing the one or more data mining algorithms to discover at least one of the intra- 
domains alarms that caused one or more of the inter-domain alarms; 

executing the one or more data mining algorithms to discover at least one of the intra- 
domain events that caused the at least one intra-domain alarm; and 

executing the one or more data mining algorithms to discover at least one of the 
component parameter values that caused the at least one intra-domain event . 
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33. (Currently Amended) The method of claim. [[32]] 5, wherein the one or more data 
mining algorithms further enterpr i se management systcm - knf - urthor' conf i gured to discover 
cause and effect relationships among the plurality of dev i ces coup l ed to the network 
components that support the service to represent + 4 ef> t + fy the respective relationships 
between root cause of the one or more events component parameter values and each of the 
intra-domain alarms and the inter-domain alarms , 

34. (Currently Amended) The method of claim [[1]] 5, wherein the one or more data 
mining algorithms further enterprise management system i s further configured to discover one 
or more of the operationa l character i st i cs component parameter values that distinguish 
whether the a h e a l thy stat e for performance of the service from an unhea l thy state for meets 
or exceeds the service level identified in to ana l yze the causes of - the-swo l atod a l arms across 
the network service level agreement . 

35-36. (Cancelled) 

37. (New) A system for reactive and deliberative service level management, comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents whether the performance of the service meets or exceeds a service level 
identified in a service level agreement; 

a plurality of sensors respectively coupled to the plurality of network components that 
support the service, wherein the plurality of sensors are configured to extract one or more 
component parameter values from the plurality of network components that support the 
service; 

a plurality of monitoring agents communicatively coupled to the plurality of sensors, 
wherein each of the plurality of monitoring agents are configured to: - 
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monitor a subset of the extracted component parameter values in a respective 
domain of a plurality of domains of the network; 

detect one or more intra-domain events in the respective domain as a function 
of the component parameter values monitored in the respective domain; and 

generate one or more intra-domain alarms in the respective domain as a 
function of the intra-domain events detected in the respective domain; 
an alarm correlation agent configured to correlate the intra-domain alarms generated 
in each of the plurality of domains of the network to generate one or more inter-domain 
alarms across the plurality of domains of the network; and 

an enterprise management system configured to analyze causes of the intra-domain 
alarms and the inter-domain alarms, wherein the intra-domain alarms and the inter-domain 
alarms indicate one or more of a degradation or a potential degradation in the performance of 
the service relative to the service level identified in the service level agreement. 

38. (New) A system for reactive and deliberative service level management, comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
expressed as a range of numeric values that represent whether the performance of the service 
meets or exceeds a service level identified in a service level agreement; 

a plurality of sensors respectively coupled to the plurality of network components that 
support the service, wherein the plurality of sensors are configured to extract one or more 
component parameter values from the plurality of network components that support the 
service; 

a plurality of monitoring agents communicatively coupled to the plurality of sensors, 
wherein the plurality of monitoring agents are configured to: 

detect one or more events in the respective domain as a function of the 
monitored component parameter values; and 

generate one or more intra-domain alarms as a function of the detected events; 
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an alarm correlation agent configured to correlate the intra-domain alarms generated 
by the plurality of monitoring agents to generate one or more inter-domain alarms across a 
plurality of domains of the network; and 

an enterprise management system configured to: 

map the inter-domain alarms generated across the plurality of domains of the 

network to a service parameter that represents the state of the service, wherein the 

service parameter has a numeric value in the range of numeric values that indicates 

whether the performance of the service meets or exceeds the service level identified in 

the service level agreement; and 

monitor the numeric value of the service parameter to provide service level 

management for the service provided over the network. 
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